MBHDRAUDt MOr UHDg RBTASDEHG 
_ SBTHBSH 

™E MATXMOL SECURITY AflBRCY/CESTIUU. 3 EC0 RXCT SERVICE 

1BD 

THE HEXZCHAL RBCOHHWSSJWCE OFFICE 
_ OH 
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Purpose 


This hwm o ran dimi of Pndarataadinq {MDUJ between the national 
Security Rgancy/Cantral Security Service/Information System 
Security Policy (HEA/CSS/ISOT] and thm national Raconnaiaaance 
Off lea, security Offica (HRO) document* and formalizes the 
understanding '.b e tw e en tha two agencies in accrediting their 
Information Systems (ISe> mad networks which process Sensitive 
CaapartMotad Intalligance information, including VRK and BYE 
information. 

Background i 

a. Both agencies use Reference b. as the standard for IS 
aeenrity accreditation and have cooperative working arrangements. 

b. For tbs purpose of iaplamentation, NBA adheres to BBR 
Msrai a l 130-1 far all government users and mo uses AZ£8HS-300. 
Both HSA and HRO use AISSIB-200 as tbs iapl mentation 
requirements manual for their contractors. 

Responsibilities! 

HRO/Office of Security/Facilities and Information Sacurity 
Division (RRO/03/FfcXSD) is responsible for ensuring all zss and 
networks owned and operated by HRO have been properly accredited. 
S8A/C3S/XS8F is for ensuring that ell zss eM 

networks owned and. operated by hsjl have been properly accredited. 


SOMET: MOO BgmggH USA. UQ> HRO ON JOINT ACCREDITATION OK 

\ mronamm systems 


Agri—nt: 

HRO/OS/KZSD and NSA/CSfl/IBSP will bu responsible for 
conducting joint accreditations of all IS* and networks deployed 
and I nst a ll a d by HRO within USA facilities and ZSa and networks 
deployed and i n s t a ll ed by NBA/CSS within BAD facilities. The 
accreditor for tha boat facility will be responsible for 
-coordinating all visits, ensuring that all ap pro pr iate 
documentation is provided, and issuing a final accreditation 
report. Upon completion of tha acoraditation process, 

MB0/08/m8D and H8A/C6S/X8SP will Issue a joint accreditation 
Bgr aaaw nt eo their respective organisations. 

If agreement cm accreditation approval cannot be reached 
between each organisations' Designated Accrediting Authority 
{tha Chief Indorsat ion Officer), the issues will be forwarded to 
Director, B a t iana l Security Agency and tha Director, National 
Reconnaissance Office for resolution. If an accreditation 
ap pro v al still cannot bo reached, the natter will be presented to 
tha Director of Central Intelligence for final accreditation 
determination. 

HRO and H8A/CSS will cooperate with and support each other's 
accreditation efforts in these Instances ■ Either HSO/OS/PUSD or 
JR8A/CS8/XSSP nay request the other accreditor act on their 
behalf. 
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SUBJECT: MOU BETMSBH MSA AHD HRO OH JOINT ACCRKDITATXQN OH 
3TOAT20B SrSTSKS 


Terrains tion/Review: 

This MOU shall becaraa effective as of th* data of the latest 
signature and shal l be reviewed by both parties, biennially. Any 
revisions or ■edifications to the HOU will be by consent of both 
p a rt ie s , in writing, and publ i sh ed as amendaaats to the base MOO. 
This MOU any be terminated upon the written notice by either 
-party to tbs other and shall be effective on a date mutually 
a gr ee d to fay the parties. 



Chief Information Officer Chief information Officer 

national Be ocim a is aa nce Offiee Rational Security Agency 


OATS: % CMxm DATS: SO «*/ 
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SUBJBCTs WO BRUSH SSX AND MRO OH JOUST ACCSSDXfMjaS OH 
INFORMATION SYSTSHS 


»• Don Directive 5200.20, Security rxiTrmnrn for 
Autoasted Zfcfomatioa Syecens (AlSa). dated March 21, 1908. 

b. Dirac tor of Central Intelligence Directive 1/16, 
C e cu rity Policy .for O al foTS Protection of Intelligence Processed 
in Butoaeted Syiteu end networks, affective 19 July 1988. 

c. Automated Information Systems Security Zaplsnantatioa 
Manual (AISffDt-2001, dated 10 Pafaruary 1994. 

d. MBA/CSS Manual 120-1, NBA/CSS Operational Computer 
Security Manual, dated 17 October 1990. 



